Kuniyuki Iwashima 229461ff0f dccp/tcp: Avoid negative sk_forward_alloc by ipv6_pinfo.pktoptions. ... commit ca43ccf412 upstream. Eric Dumazet pointed out [0] that when we call skb_set_owner_r() for ipv6_pinfo.pktoptions, sk_rmem_schedule() has not been called, resulting in a negative sk_forward_alloc. We add a new helper which clones a skb and sets its owner only when sk_rmem_schedule() succeeds. Note that we move skb_set_owner_r() forward in (dccp|tcp)_v6_do_rcv() because tcp_send_synack() can make sk_forward_alloc negative before ipv6_opt_accepted() in the crossed SYN-ACK or self-connect() cases. [0]: https://lore.kernel.org/netdev/CANn89iK9oc20Jdi_41jb9URdF210r7d1Y-+uypbMSbOfY6jqrg@mail.gmail.com/ Fixes: 323fbd0edf ("net: dccp: Add handling of IPV6_PKTOPTIONS to dccp_v6_do_rcv()") Fixes: 3df80d9320 ("[DCCP]: Introduce DCCPv6") Fixes: 1da177e4c3 ("Linux-2.6.12-rc2") Signed-off-by: Kuniyuki Iwashima <kuniyu@amazon.com> Reviewed-by: Eric Dumazet <edumazet@google.com> Signed-off-by: Jakub Kicinski <kuba@kernel.org> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>		2023-02-22 12:59:52 +01:00
..
acpi	ACPI: Fix selecting wrong ACPI fwnode for the iGPU on some Dell laptops	2023-01-18 11:58:11 +01:00
asm-generic	15 hotfixes. 11 marked cc:stable. Only three or four of the latter	2022-12-02 13:39:38 -08:00
clocksource
crypto
drm	drm/drm_vma_manager: Add drm_vma_node_allow_once()	2023-02-01 08:34:42 +01:00
dt-bindings	dt-bindings: clocks: imx8mp: Add ID for usb suspend clock	2022-12-31 13:33:09 +01:00
keys
kunit	kunit: fix kunit_test_init_section_suites(...)	2023-02-09 11:28:08 +01:00
kvm
linux	hugetlb: check for undefined shift on 32 bit architectures	2023-02-22 12:59:49 +01:00
math-emu
media	media: dvbdev: fix build warning due to comments	2022-12-31 13:33:12 +01:00
memory
misc
net	dccp/tcp: Avoid negative sk_forward_alloc by ipv6_pinfo.pktoptions.	2023-02-22 12:59:52 +01:00
pcmcia
ras
rdma
rv
scsi	scsi: iscsi_tcp: Fix UAF during logout when accessing the shost ipaddress	2023-02-09 11:28:12 +01:00
soc	ARM: at91: pm: avoid soft resetting AC DLL	2022-11-01 12:25:19 +02:00
sound	ALSA: hda/hdmi: fix stream-id config keep-alive for rt suspend	2022-12-31 13:33:07 +01:00
target
trace	tracing: Fix TASK_COMM_LEN in trace event format file	2023-02-14 19:11:54 +01:00
uapi	drm/virtio: exbuf->fence_fd unmodified on interrupted wait	2023-02-14 19:11:45 +01:00
ufs	scsi: ufs: core: Fix devfreq deadlocks	2023-02-01 08:34:39 +01:00
vdso
video
xen	xen/virtio: enable grant based virtio on x86	2022-10-10 14:31:26 +02:00